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Can a classical system command a general adversarial quantum system to realize arbitrary quantum dynamics? If 
so, then we could realize the dream of device-independent quantum cryptography: using untrusted quantum devices 
to establish a shared random key, with security based on the correctness of quantum mechanics. It would also allow 
for testing whether a claimed quantum computer is truly quantum. Here we report a technique by which a classical 
system can certify the joint, entangled state of a bipartite quantum system, as well as command the application of 
specific operators on each subsystem. This is accomplished by showing a strong converse to Tsirelson's optimality 
result for the Clauser-Horne-Shimony-Holt (CHSH) game: the only way to win many games is if the bipartite state is 
close to the tensor product of EPR states, and the measurements are the optimal CHSH measurements on successive 
qubits. This leads directly to a scheme for device-independent quantum key distribution. Control over the state and 
operators can also be leveraged to create more elaborate protocols for reliably realizing general quantum circuits. 



Do the laws of quantum mechanics place any limits on 
how well a classical experimentalist can characterize the 
state and dynamics of a large quantum system? As a 
thought experiment, consider that we are presented with 
a quantum system, together with instructions on how to 
control its evolution from a claimed initial state. Can we, 
as classical beings, possibly convince ourselves that the 
quantum system was indeed initialized as claimed, and 
that its state evolves as we instruct? 

More formally, model the quantum system as contained 
in a black box, and model our classical interactions with it 
as questions and answers across a digital interface, perhaps 
of buttons and light bulbs (Figure 1). Using this limited 
interface, we wish to characterize the initial state of the 
system. We also wish to certify that on command — by 
pressing a suitable sequence of buttons — the system applies 
a chosen local Hamiltonian, or equivalently a sequence of 
one- and two-qubit quantum gates, and outputs desired 
measurement results. 

Although a philosophical question, a positive resolution 
would have important consequences. It is particularly rel- 
evant in quantum cryptography, where it is natural to 




Figure 1: Classical interaction with a quantum system. 

A general system can be abstracted as a black box, with two 
buttons for accepting binary input and two light bulbs for out- 
put. Using this interface, we wish to control fully the system's 
quantum dynamics. 



model the quantum system as adversarial since the goal is 
to protect honest users from malicious adversaries. The 
raison d'etre of quantum cryptography is to create a cryp- 
tographic system with security premised solely on basic 
laws of physics, and with quantum key distribution (QKD) 
and its security proofs 1 3 it appeared to have achieved 
exactly this. However, attackers have repeatedly breached 
the security of QKD experiments, by exploiting imperfect 
implementations of the quantum devices. 4-6 Rather than 
relying on ad hoc countermeasures, Mayers and Yao's 1998 
vision of device-independent (DI) QKD, 7 hinted at ear- 
lier by Ekert, 8 relaxes all modeling assumptions on the 
devices, and even allows for them to have been constructed 
by an adversary. It instead imagines giving the devices 
tests that cannot be passed unless they carry out the QKD 
protocol securely. The challenge at the heart of this vi- 
sion is for a classical experimentalist to force untrusted 
quantum devices to act according to certain specifications. 
DIQKD has not been known to be possible; security proofs 
to date require the unrealistic assumption that the devices 
have no memory between trials, or that each party has 
many, strictly isolated devices. 9 18 A scheme for character- 
izing and commanding a black-box quantum device would 
provide a novel approach to achieving DIQKD. 

Further, as the power of quantum mechanics is harnessed 
at larger scales, for example with the advent of quantum 
computers, it will be useful to evaluate whether a quan- 
tum device in fact carries out the claimed dynamics. 19 ' 20 
Finally, we might wish to test the applicability of quantum 
mechanics for large systems, a situation in which Nature 
itself plays the role of the adversary. 21 

The existence of a general scheme for commanding an 
adversarial quantum device appears singularly implausible. 
For example, in an adversarial setting, experiments can- 
not be repeated exactly to gather statistics, since a system 
with memory could deliberately deceive the experimentalist. 
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AB = X © Y 



Figure 2: Test for quant umness. In a CHSH experiment, or 
"game," the experimentalist Eve sends independent, uniformly 
random bits A and B to the devices Alice and Bob, respectively, 
who respond with bits X and Y. The devices "win" the game 
if AB — X © Y . By a Bell inequality, classical devices can 
win with probability at most 3/4. Quantum devices can win 
with probability cj* = cos 2 (| : ) « 85.4%, if they follow an ideal 
CHSH strategy: on a shared Einstein-Podolsky-Rosen (EPR) 
state \(p) = ^(|00) + |11)), Bob measures the Pauli operator a z 
if B = or a x if B — 1, and Alice measures -^(cr z + (— l) A a x ). 
Tsirelson showed that this strategy is optimal. 22 

More fundamentally, as macroscopic, classical entities, our 
access to a quantum system is extremely limited and indi- 
rect, and the measurements we apply collapse the quantum 
state. Furthermore, whereas the dimension of the under- 
lying Hilbert space scales exponentially in the number of 
particles or can be infinite, the information accessible via 
measurement only grows linearly. Indeed, as formulated it 
is impossible to command a single black-box system. Quite 
simply, one cannot distinguish between a quantum system 
that evolves as desired and a device that merely simulates 
the desired evolution using a classical computer. 

In this paper, we consider a closely related scenario. 
Suppose we are instead given two devices, each modeled 
as a black box as above, and prevented from communi- 
cating with each other. In this setting, with no further 
assumptions, we show how to classically command the de- 
vices. That is, there is a strategy for pushing the buttons 
such that the answering light bulb flashes will satisfy a 
prescribed test only if the two devices started in a particu- 
lar initial quantum state, to which they applied a desired 
sequence of quantum gates. Moreover, though impractical, 
the scheme is theoretically efficient — in the sense that the 
total effort, measured by the number of button pushes, 
scales as a polynomial function of the size of the desired 
quantum circuit. A DIQKD scheme follows, among other 
consequences. 

The starting point for our protocol is the famous Bell 
experiment, 23 and its subsequent distillation by Clauser, 
Home, Shimony and Holt (CHSH). 24 Conceptually mod- 
eled as a game (Figure 2), it provides a "test for quantum- 
ness," a way for an experimentalist, whom we shall call 
Eve, to demonstrate the entanglement of two space-like 
separated devices, Alice and Bob. 

Consider a protocol in which Eve plays a long sequence of 
CHSH games with Alice and Bob, and tests that they win 
close to the optimal fraction uu* of the games. This paper's 



main technical result establishes that if the devices pass 
Eve's test with high probability, then at the beginning of a 
randomly chosen long subsequence of games, Alice and Bob 
must share many EPR states in tensor product, that they 
measure one at a time using the single-game ideal CHSH 
operators of Figure 2. This is a step towards the general vi- 
sion outlined above because it characterizes the initial state 
of many qubits, and allows Eve to command the devices 
to perform certain single-qubit operations. Of course, we 
cannot hope to characterize the devices' strategies exactly, 
but only for a suitable notion of approximation. 

In order to make a more precise statement, first consider 
a single CHSH game. We show that if the devices win with 
probability uu* — e, then they must share a state that is 
0(y / e)-close to an EPR state, possibly in tensor product 
with an additional state. Moreover their joint measurement 
strategy is necessarily 0(y / e)-close to the ideal strategy 
from Figure 2. (That is, applying Alice's actual measure- 
ment operator to the shared state gets within distance 
0(y / e) of the result from applying her ideal measurement 
operator to the EPR state tensored with the ancilla; and 
similarly for Bob.) Since each device can locate its qubit 
share of the EPR state arbitrarily within its Hilbert space, 
these statements hold only up to local isometries. This 
may be seen as a robust converse to Tsirelson 's inequality, 
and as a rigidity property of the CHSH game: a nearly 
maximal Bell inequality violation rigidly locks into place 
the devices' shared state and measurement directions. 

A converse to Tsirelson's inequality for the CHSH game 
has been shown previously in the exact case. 25 ' 26 Robust- 
ness is important for applications, however, because the 
success probability of a system can never be known exactly. 
Robust, e > 0, converse statements have been shown based 
on a conjecture 27 or under restrictive symmetry assump- 
tions. 14 ' 15 Recently, robustness has independently been 
shown for the CHSH game. 28,29 

Scaling up to a sequence of n CHSH games, suppose 
Alice and Bob use a strategy such that they win at least 
(1 — e)uu*n of the games with high probability. By basic 
statistics, their strategy at the beginning of most games will 
win that single game with probability at least (1 — e Q ^)u*. 
Rigidity for the one-shot game therefore applies. However, 
their strategy for playing the jth game could depend on 
the previous games. The states close to EPR states used 
in different games could overlap significantly, and their 
locations could depend on the history. The multi-game 
rigidity theorem rules out such wayward behavior. It says 
that for most random blocks of m = consecutive 
games, at the start of the block Alice and Bob must share 
a state that is close to a tensor product of m EPR states, 
tensored with an additional state, and must play each jth 
game by making measurements that are close to the ideal 
CHSH strategy on the jth EPR state — different games 
being entirely independent. 

One way to view this theorem is that it scales up the 
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CHSH test for quantumness and allows for identifying many 
qubits' worth of entanglement. Much more than that, how- 
ever, the multi-game rigidity theorem gives strong control 
over the devices' measurement operators for different games. 
As described below, combining the CHSH game protocol 
with protocols for state and process tomography, and for 
computation by teleportation, thereby gives a method for 
realizing arbitrary dynamics in quantum systems without 
making assumptions about the internal structure or opera- 
tions. The dynamics are realized as the joint evolution of 
two isolated quantum systems, Alice and Bob, mediated 
by a classical experimentalist, Eve. 

The problem of controlling computationally powerful 
but untrusted resources lies at the foundation of com- 
puter science. In the complexity class NP, for example, 
a polynomial-time routine — the "verifier" — is allowed one 
round of interaction with an arbitrarily powerful, but mali- 
cious, "prover." We show that the same verifier can exploit 
the power of quantum-mechanical provers. In particular: 

1. A classical verifier can efficiently simulate a quantum 
computer by interacting with two untrusted, polynomial- 
time quantum provers. This delegated computation scheme 
is also blind, meaning that each prover learns no more than 
the length of the computation. 

2. The verifier in any quantum multi-prover interactive 
proof system can be assumed to be classical. Formally, the 
complexity classes QMIP and MIP* are equal. 
Previous work has considered a verifier who can store and 
control a constant number of qubits while interacting with 
a single prover. 19,20 ' 30 ' 31 Our work is also inspired by a 
proposal 32 that QMIP should equal MIP*. Our protocol 
has a very different form, based on the multi-game rigidity 
theorem. 

Tensor-product structure for repeated games 

A strategy S for playing n sequential CHSH games specifies 
Alice and Bob's initial joint state as well as their measure- 
ment operators for every possible situation. That is, for 
X G {A, B} and each j = 1, . . . , n, S specifies the measure- 
ment operators used by device X in game (j, where 
hj ) _ 1 is any transcript of the device's input and output bits 
for the first j — 1 games. For two strategies to be "close" 
means that the distributions of game transcripts they in- 
duce should be close in total variation distance; and that 
for most transcripts (drawn from either distribution), the 
resulting quantum states should be close in a suitable norm. 
We combine these conditions into one by defining for any 
strategy a block- diagonal density matrix that stores both 
the classical transcript and the resulting quantum state: 

ft = 0P^i-ibiM' (i) 

Here hj-i = {hf_^ ^f_i) is the full transcript for the first 
j — I games and pj{hj-\) is the state at the beginning of 



game j conditioned on hj-±. Two strategies S and S are 
close if the associated pj and pj are close in trace distance, 
for every j. 

Assume that for every j and most hj-i, the devices' 
conditional joint strategy at the beginning of game j is 
"e-structured," meaning that it wins with probability at 
least uo* — e. Our key theorem establishes that up to local 
basis changes, the devices' initial state must be close to n 
EPR states, possibly in tensor product with an irrelevant 
extra state, and that their total strategy S must be close 
to an ideal strategy S that plays game j using the jth EPR 
state. Since the structure assumption can be established by 
martingale arguments on poly(n) sequential CHSH games, 
this implies the multi-game rigidity theorem. 

The main challenge is to "locate" the ideal strategy 
S within Alice and Bob's Hilbert space, i.e., to find an 
isometry on each of their spaces under which their states 
and measurement operators are close to ideal. However, a 
priori, we do not know whether S calls for the devices to 
measure actual qubits in each step, or even if so whether 
the qubits form EPR states, qubits for different games 
overlap each other, or the locations of the qubits depend 
on the outcomes of previous games. 

The construction to locate the qubits in the single-game 
rigidity theorem is a good place to start. Consider an e- 
structured strategy, consisting of some shared mixed state 
in T~La ^'Hb, and two-outcome projective measurements 
for each of Eve's possible questions. Truncate the devices' 
Hilbert spaces to finitely many dimensions, then decompose 
each space by Jordan's lemma 33 into the direct sum of 
two-dimensional spaces invariant under the projections. 
Within each such two-dimensional subspace adjust the 
angles between the projections to match the ideal strategy. 
The resulting operators define underlying qubits. 1 

For multiple CHSH games, the given strategy S can be 
transformed into a nearby ideal strategy S by a three-step 
sequence: 

1. First, replace each device's measurement operators 
by the ideal operators promised by the single-game rigidity 
theorem. In the resulting strategy <S, each device X plays 
every game (j, using the ideal CHSH game operators 
on some qubit, up to a local change in basis. However, 
the basis change can depend arbitrarily on h^_^ and the 
qubits for different j need not be in tensor product. 

2. In a "multi-qubit ideal strategy" <S, the qubits used 
in each game can still depend on the local transcripts but 
must at least lie in tensor product with the qubits from 
previous games. This imposes a tensor-product subsystem 
structure that previous DIQKD proofs have assumed. The 
tensor-product structure is constructed beginning with a 
trivial transformation on S: to each device, add n ancilla 
qubits each in state |0). Next, after a qubit has been 
measured, say as \aj) in game j, swap it with the jth 
ancilla qubit, then rotate this fresh qubit from |0) to \ctj) 

1 A technical account with full proofs will appear elsewhere. 34 
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and continue playing games j + 1, . . . , n. This defines a 
unitary change of basis that places the outcomes for games 
1 to j in the first j ancilla qubits, and leaves the state 
in the original Hilbert space unchanged. Since qubits are 
set aside after being measured, the qubits for later games 
are automatically in tensor product with those for earlier 
games; the resulting strategy S is multi-qubit ideal. At 
the end of the n games, swap back the ancilla qubits and 
undo their rotations, using the transcript. 

3. In the last step, we replace S with an ideal strategy 
<S, in which Alice and Bob each play using a fixed set of n 
qubits. Fix a transcript h ni chosen at random. For the first 
time, change the devices' initial state: replace pi with pi, 
a state having n EPR states in the locations determined 
by h n in S. In <S, the devices play using these EPR states, 
regardless of the actual transcript. This S is the desired 
ideal strategy. 

Ideal strategy S is close to S 

It remains to show that the transformation's three steps 
incur a small error: S is close to S. A major theme in the 
analysis is to leverage the known tensor-product structure 
between Ha and Hb to extract a tensor-product structure 
within Ha and Hb- 

1. S ~ S\ Although elementary, explaining this step 
is useful for establishing some notation. Let p\ be the 
devices' initial shared state, possibly entangled with the 
environment. Let £ f and £ B be the super-operators that 
implement Alice and Bob's respective strategies for game j, 
£f B =£f®£f and£$f = ££ B • • • Ef B for j < fc; thus 
the state pj of Eq. (1) equals For D e {A, £}, 
let Ef be the super-operator that replaces the actual 
measurement operators with the ideal operators promised 
by the CHSH rigidity theorem. S is given by pi, {£f} 
and {£ B }. If Pr[game j is e-structured] > 1 — 5, then 
\\£f B (Pj) - Ef B ( Pj )\\ tr < 26 + 0(y/e). (This expression 
uses Eq. (1) to combine bounds on the probability of the 
bad event and the 0(y/e) error from the good event.) To 
show our goal, that £^ B (pi) ~ £\ B (pi) in trace distance, 
use a hybrid argument that works backwards from game n 
to game 1 fixing each game's measurement operators one 
at a time. 

2. S ~ <S: The key to showing that S is close to S is 
the fact that operations on one half of an EPR state can 
equivalently be performed on the other half, since for any 
2x2 matrix M, (M<8>/)(|00) + |11)) = (7(g)M T )(|00) + |ll)). 
This means that the outcome of an e-structured CHSH 
game would be nearly unchanged if Bob were hypothetically 
to perform Alice's measurement before his own. By moving 
Alice's measurement operators for games j + 1 to n over to 
Bob's side, we see that they cannot significantly affect the 
qubit \aj) from game j on her side. Therefore, undoing the 
original change of basis restores the ancilla qubits nearly 
to their initial state |0 n ), and S « S. 



Formally, define a unitary super-operator Vj that rotates 
the jth ancilla qubit to \aj), depending on Alice's tran- 
script hf. Define a unitary super-operator Tj to apply Vj 
and swap the jth ancilla qubit with the qubit Alice uses 
in game j (depending on h^_ ± ). Alice's multi-qubit ideal 
strategy is given by 

£f = T 1 - 1 _ 1 (l c ^®£f)T 1 , j - 1 . (2) 

We aim to show that the strategy given by pi : {£f} and 
{£ B } is close to S up to the fixed isometry that prepends 
|0 n )(0 n | to the state, i.e., that |0 n )(0 n | <8> £i*(pi) ~ 

^n(l° n X° n | ® ^ n (pi)). Define a super-operator Tf B 
in which Alice's measurements are made on Bob's Hilbert 
space I-Lb, on the qubit determined by Bob's transcript 
hf-i- Since most games are e-structured, by the CHSH 
rigidity theorem, Ff+ hk (p j+ i) ~ £f+i lk (Pj+i) = Pk+i for 
j < k. Since Ff+\^ acts on Hb : it does not affect Al- 
ice's qubit \a.j) from game j at all, and so this qubit must 
stay near \aj) in pu+i as well, i.e., the trace of the reduced 
density matrix against the projection \aj)(aj\ stays close 
to one. As this holds for every j, T^n indeed returns the 
ancillas almost to their initial state |0 n ). The {£ B } are 
symmetrically adjusted to {E B }. 

3. S « S: In 5, Alice and Bob play according to 
a strategy in which every game uses a qubit in tensor 
product with the previous games' qubits. However, the 
qubit's location can depend on previous games' outcomes. 
We wish to argue that Alice and Bob must play using a 
single set of n qubits, fixed in advance independent of the 
transcript. 

Intuitively, if the location of Alice's jth qubit depended 
on hj L _ 11 then since the devices cannot communicate with 
each other, Bob could not know which of his qubits to 
measure. However, Alice and Bob's transcripts are signifi- 
cantly correlated, and we must show that they cannot use 
these correlations to coordinate dynamically the locations 
of their qubits. 

For a toy example that illustrates the issue, consider 
two devices who play the first n — 1 games honestly and 
which at the beginning of the last game share two EPR 
states, |^)^ 2 . Say that for certain functions / and g, 
Alice uses EPR state G {1,2} in game n, and 

Bob uses EPR state ^(^-l) ^ {1, 2}. For game n to 
be structured, they need = g{h B -i) so that they 

measure the same EPR state. Now Alice and Bob's local 
transcripts are each uniformly random, separately, but they 
have a constant correlation in every game coordinate. It 
is straightforward to argue based on coordinate influence 
that if Yr[f{Hn-\) ^ g(H B _ 1 )] is small, then / and g must 
both be nearly constant. Thus one of the two EPR states 
is used almost always. 

This example gives an essentially classical cheating strat- 
egy. The actual devices may be significantly more sophisti- 
cated. In particular, small amounts of cheating in earlier 
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games might enable an avalanche of more and more blatant 
cheating in later games, drastically changing the underlying 
quantum state. If, for example, Alice knowingly manages 
to swap her halves of the two last EPR states along some 
transcripts h^_ Xl then she can use completely different 
strategies for the last game without having to coordinate 
with Bob. We control such errors, like in the arguments 
sketched above, by approximating Alice's super-operator 
as acting on Bob's Hilbert space. More formal arguments 
are deferred to the supplementary material. 

The conclusion that the devices' joint strategy is close 
to ideal, £^n(pi) ~ £\n{pi)i * s n °t strong enough for 
our applications, in which sometimes Eve plays CHSH 
games with only one of the two devices. We need to show 
that the devices' strategies are separately close to ideal, 
i-e-, £^ n (pi) ~ A A n(Pi) and £^ n (pi) « £^ n (f>i). These 
estimates cannot be obtained directly because our main as- 
sumption, that every game j is usually e-structured, is only 
of use if both devices have played games 1 through j — 1 — 
it gives information about applied to £^f-i(pi), not 
about £P applied to £fj_i(pi). The key idea to obtain 
separate estimates is that applying both devices' super- 
operators is almost equivalent to applying Alice's super- 
operator, guessing Bob's measurement outcome from the 
ideal conditional distribution, and based on the guess ap- 
plying a controlled unitary correction to his qubit. Since 
Alice's super-operator collapses both qubits of the EPR 
state, it is not actually necessary to measure Bob's qubit. 
Defining Q? to be this guess- and- correct super-operator, 
two hybrid arguments give £i^(Pi) ~ G^ n £^ n (pi) and 

£V£n(Pl) « Q?JUPl)' ^US, 

The same super-operator Qf n appears on both the left- 
and right-hand sides above. In general, applying a super- 
operator can reduce the trace distance. In this case, how- 
ever, it does not; the correction part of Qf n is unitary, 
and the guessing part is a stochastic map acting on a copy 
of Alice's classical transcript register. Therefore, indeed 
^i'n(Pi) ~ £in(pi)- The third step of the proof uses a 
similar, but more involved, argument. 

Verified quantum dynamics 

Our scheme for verified quantum dynamics is based on 
the idea of computation by teleportation, which reduces 
computation to preparing certain resource states and ap- 
plying Bell measurements (Figure 3(f)). 35 Say that Eve 
wants to simulate a quantum circuit C, over the gate 
set {i^,G, CNOT}, where H is the Hadamard gate and 
G = exp(— i^(Ty). Eve asks Bob to prepare many copies of 
the state |0)(g)(/(g)i^)|^)(g)(/(g)G)|^)(g)CNOT 2 ,4(|^)(8)|^)). 
He can do so by applying one-, two- and four-qubit measure- 
ments to his halves of the shared EPR states and reporting 



the results to Eve. If he plays honestly, Alice's shares of 
the EPR states collapse into the desired resource states, 
up to simple corrections. Each resource state corresponds 
to a basic operation in C. Eve wires these up by repeatedly 
directing Alice to make a Bell measurement connecting the 
output of one operation to the input of the next operation 
in C. After each G gate, an H correction might be required. 

Of course, Alice and Bob might not follow directions. 
To enforce honest play, Eve runs this protocol only a small 
fraction of the time, and otherwise chooses uniformly be- 
tween three alternative protocols sketched in Figure 3. Let 
m= |C|° (1) andn = m°W. 

1. In the "state tomography" protocol, Eve chooses 
K uniformly from {1, . . . , n/m}. She referees (K — l)m 
CHSH games. Then in the Kth block of m, Eve asks Bob 
to prepare the resource states, in a random order, while 
continuing to play CHSH games with Alice. Eve rejects 
if the tomography statistics are inconsistent. We prove 
that if Alice plays honestly and Eve accepts with high 
probability, then on most randomly chosen small subsets of 
the resource state positions, Alice's reduced state is close 
to the correct tensor product of resource states. 

2. In the "process tomography" protocol, Eve again 
chooses K uniformly from {1, . . . , n/m} and referees (K — 
l)m CHSH games. In the Kth block of m, Eve asks Alice 
to make Bell measurements on random pairs of qubits, 
while continuing to play CHSH games with Bob. If Alice's 
reported result for any pair of qubits is inconsistent with 
Bob's outcomes, Eve rejects. Then if Bob plays honestly 
and Eve accepts with high probability, Alice must also have 
applied the Bell measurements honestly. 

3. In the third protocol, Eve simply referees n sequential 
CHSH games with both devices and rejects if they do not 
win at least (1 — e)uu*n games. 

From Bob's perspective the process tomography and 
computation protocols are indistinguishable, as are the 
state tomography and CHSH game protocols. From Al- 
ice's perspective, the state tomography and computation 
protocols are indistinguishable, as are the process tomogra- 
phy and CHSH game protocols. The devices must behave 
identically in indistinguishable protocols. The multi-game 
rigidity theorem therefore provides the base for a chain 
of implications that implies that if Eve accepts with high 
probability, then the devices must implement C honestly. 

Four main technical problems obstruct these claims. 

First, in the state tomography protocol, if Bob is dis- 
honest, then Alice gets an arbitrary m-qubit state, and 
there is no reason why it should split into a tensor product 
of repeated, constant-qubit states. Nonetheless, we argue 
using martingales that if the counts of Alice's different 
measurement outcomes roughly match their expectations 
with high probability, then for most reported measurement 
outcomes from Bob and for most subsystems j, Alice's 
conditional state reduced to her jth subsystem is close to 
what it should be. 
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Figure 3: Sub-protocols for verified quantum dynamics. To delegate a quantum computation, Eve runs a random one of 
four sub-protocols with Alice and Bob. a, Playing many CHSH games ensures that the devices play honestly using shared EPR 
states, b-c, This lets Eve apply state or process tomography to characterize more complicated multi-qubit operations, d-e, By 
adaptively combining these operations, Eve directs a quantum circuit C. The zig-zagging logical path of the first qubit of C is 
highlighted, f, Each gate of C is implemented through teleportation; in this simpler example, H is applied by a Bell measurement 
on half of the resource state (I H)\ip). 



Furthermore, saturating Tsirelson's inequality for the 
CHSH game only implies that Alice is honestly making 
Pauli cr x and cr z measurements on her half of an EPR state. 
Tomography also requires a y measurements. To sidestep 
this issue, we generalize a theory introduced by McKague 36 
and prove that there is a large class of states, including the 
necessary resource states, that are all robustly determined 
by only a x and a z measurements. 

A bigger problem, though, is that we want to character- 
ize the operations that the devices apply to their shared 
EPR states, and not just the states that these operations 
create on the other side. The distinction is the same as 
that between process and state tomography. Essentially, 
the problem is that the correct states could be generated 
by incorrect processes. Moreover, as for sequential CHSH 
games, Bob's strategy in early tomography rounds might 
be sufficiently dishonest as to allow him in later rounds to 
apply completely dishonest operators. A key observation to 
avoid this problem is that it is enough to certify the states 
prepared by one device and the processes applied by the 
other. Then since a broad class of states can be certified, 
for applications it suffices to certify a much smaller set of 
operations. We restrict consideration to Pauli stabilizer 
measurements. 37 For Pauli operators in the stabilizer of a 
state, the measurement outcome is deterministic. There- 
fore if Alice reports the wrong stabilizer syndrome in even 
a single round, Eve can reject. Our process certification 
analysis is similar to some of the arguments used above. 
We argue that Alice's earlier measurements cannot usually 



overly disturb the qubits intended for use in later mea- 
surements, by pulling Alice's measurement super-operators 
over onto Bob's halves of the EPR states. 

Finally, the verifier's questions in the state and process 
tomography protocols are non-adaptive, whereas in com- 
putation by teleportation the questions must be chosen 
adaptively based on previous responses. This is an attack 
vector in some related protocols. However, we argue that 
the devices can learn nothing from the adaptive questions. 
This follows because computation by teleportation can be 
implemented exactly equivalent ly either by choosing Bob's 
state preparation questions non-adaptively and Alice's pro- 
cess questions adaptively, or vice versa. 

The proof that QMIP = MIP* follows along similar lines. 
Begin with a /c-prover protocol. We may assume that it 
has two rounds of quantum messages from the provers, 
before and after the verifier broadcasts a random bit. 38 To 
convert to an MIP* protocol, with classical messages, add 
two additional provers, Alice and Bob. Eve teleports the 
original k provers' messages to Alice, and directs Alice and 
Bob together to apply the quantum verifier's acceptance 
predicate. 

Discussion 

By characterizing the device strategies that can win many 
successive CHSH games, we have shown how a fully classi- 
cal party can direct the actions of two untrusted quantum 
devices. The simplest case is device-independent quan- 
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turn key distribution, free of the independence assumptions 
needed in previous analyses. A major open problem is 
to improve the efficiency of our schemes, so as to get a 
key rate that is a positive constant instead of inverse poly- 
nomially small. More generally, the CHSH game rigidity 
theorems have no classical analog; and further implications 
for cryptographic primitives and protocols with drastically 
reduced security assumptions remain to be explored. 

A Rigidity for the CHSH game 

In this appendix, we sketch the proof of the single-game 
CHSH rigidity theorem for the case that the devices' Hilbert 
spaces Ha and Hb are finite dimensional, and e = 0, i.e., 
the devices achieve the maximum correlation allowed by 
Tsirelson's inequality. Hilbert space completeness allows 
for truncating an infinite-dimensional space to finitely many 
dimensions, at an arbitrarily small cost. 

A general strategy for the devices consists of measuring 
some shared state in Ha^^b- Since the success probability 
is extremal, i.e., e = 0, we may assume that the state is 
extremal, i.e., is pure. Each device measures its system 
using a reflection that depends on Eve's question, and 
returns the sign of the observed eigenvalue ±1. The shared 
state and Alice and Bob's four reflections Rq, Rf, Rq 
and Rf determine the strategy. 

Jordan's Lemma 33 states that any two reflections act- 
ing on a finite-dimensional space can be simultaneously 
block-diagonalized into lxl and 2x2 blocks. (The same 
statement is false for infinite-dimensional spaces.) Apply 
the lemma to Rq and R^, to obtain 

Ra=®Raii), (3) 

where i labels the block index, and each R^ii) is a 1 x 1 
or 2 x 2 reflection. By adding placeholder dimensions, we 
may assume without loss of generality that each block is 
2x2. Eq. (3), which can equivalently be rewritten R% = 
J2i Ra(i) ® KX^Ij gi yes a basis in which Ha = C 2 (g) H' A , 
where H' A is the Hilbert space with orthonormal basis {\i}}. 
Thus Jordan's Lemma gives (an extension of) the a priori 
formless space Ha a tensor-product structure. It locates 
within Ha a qubit C 2 . However, Alice's operators need 
not act locally on this qubit; a controlled rotation is still 
needed to align her operators. After this rotation, we will 
show that Alice's strategy is close to the ideal CHSH game 
strategy that measures this qubit using the operators given 
in Figure 2. 

Since the measurement of the block index commutes with 
both R^, we may assume that Alice measures the block 
index first. Thus we reduce to the case that Ha = C 2 , 
and, by a symmetrical argument, that Hb = C 2 , still with 
e = 0. 

If the R® reflections act on C 2 and are not equal to 
±7, then we can choose a basis such that Rq = a z = 



(l \ tdA _ ( cos 29 sin 2(9 \ ot1 j tdB _ ( cos 29' sin 2(9' \ 
{Q-lJi-Kl — Uin 26 - cos 26 ) driQ n l ~ \ sin 29' - cos 29' ) 

for certain angles 0, 0' G [0, |]. (As this basis depends on 
the block index, changing basis amounts to a controlled 
qubit rotation.) Letting M a = \{R$ + (-l) a Rf) <8> I - 
-W(g> i?f for a G {0,1}, the success probability satisfies 

2V2 - 8e < 8 Pr[AB = X © Y] - 4 

= M( E (-i) a6 <^f)hA> 

a,6G{0,l} 

= 2V2 - V2(iP\(Mq + Mi)\<i/j) . 

For e = 0, this means that must lie in the intersection 
of the kernels of Mo and Mi. The four eigenvalues of Mq 
are ± cos 0±-^=. For the kernel to be nonempty, it must be 
that = j. A symmetrical argument implies that 0' = j. 
For small e > 0, must lie close to small-eigenvalue 
subspaces of both Mq and Mi , implying that and 0' are 
close to j. Thus the measurement operators are rigidly 
determined. 

For = 0' = f , the kernel of V2((HG)®I)M ((G^H) 
I) = cr z 0/ — I<&a z is spanned by the vectors 1 00) and |11). 
The kernel of v / 2((^G)0/)Mi((G t i^)0/) = a x ®I-I®a x 
is spanned by the vectors |+) (g) |+) = t> (|00) + |01) + |10) + 
|11)) and |-) |-) = |(|00> - |01) - |10) + |11)). For the 
1 01) and 1 10) terms to cancel out, a linear combination of 
these vectors must have equal coefficients. The intersection 
between the two kernels is therefore spanned by 1 00) + |11). 
Thus the state is rigidly determined. 

The above argument conveys much of the intuition for 
the CHSH rigidity theorem. The case e > can be handled 
by maintaining suitable approximations. However, we have 
not explained the derivation of the operators Mo and Mi, 
chosen to satisfy Ea,6e{o,i}( -1 ) a6jR a ® Rf = 2y/2I (8) I - 
a/2 (Mo + M 2 ). In general, for a game in which Eve draws 
her questions from the distribution p(a, b) and accepts if 
x®y = V(a,b), let 9 = £a,6P( a > b)(-l) v ^\a)(b\ and 
Q = ( @t ^ ) • Let uj* be the optimal success probability. 
By the Tsirelson semi-definite program, 39 the optimal bias 
is 2cj* - 1 = ^max r ^o,ro/=/(6,r) = \ min A=Ao/ ^Q Tr A. 
T is the Gram matrix of the vectors R^W) and R^\i/j). 
Letting A* achieve the second optimum, we have |(G, T) = 
(2w*-l)-|(A*-e,r). For the CHSH game, A* = ^1, 
and the matrices Mo, Mi correspond to eigenvectors of 
A* - 6. 

B Rigidity for sequential CHSH games 

For sequentially repeated CHSH games, our goal is to 
locate in Ha and Hb not one but many qubit s, in tensor 
product, such that the devices' actual strategy is close to 
the ideal strategy that measures these qubits one at a time 
in sequence. In this section, we will introduce the notation 
and put together the theorems needed to prove rigidity for 
sequential CHSH games. 
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B.l Notation 

To make our claims precise, we begin with some notation 
for CHSH games played in sequence, one following the next, 
with no communication between games. 

A strategy S for Alice and Bob to play n sequential 
CHSH games consists of the devices' Hilbert spaces, initial 
shared state and the reflections they use to play each game. 

Initial state: Let Ha and be Alice and Bob's re- 
spective Hilbert spaces, and He any external space. Let 
|^) £ Ha §§Hb ® He be the devices' initial shared state. 

Transcripts: Denote questions asked to Alice by 
ai, . . . , a n , questions asked to Bob by bi,...,b n , and pos- 
sible answers by xi,...,x n and yi, . . . , y n: respectively. 
Write hf = (ai, x\, . . . , a h Xj), hf = (61, y x , . . . , b h yj) 
and hj = (hf,hf), a full transcript for games 1 through j. 
Write hj^k and hf k for the full or partial transcripts for 
games j through fc, inclusive. 

Reflections: In game j, for questions aj and bj, 
let Raj(hf-i) and RfX^f-i) ^ e the reflections specify- 
ing Alice and Bob's respective strategies for game j, de- 
pending on the previous games' transcript. Define projec- 
tions Pf(hf) = |(1 + (-l)*^.^)) and Pf(hf) = 
|(1 + (-l) w iJ^(/tf_i)). For D G {A,B} and j < k, 
1* P£M) = P?(h?)-- P° +1 {hf +1 )P°{hf). Let 
P$(hk) = P£M)®P» k {h»). 

Super-operators: For j < k and partial transcript /ij, 
define super-operators £^ hj and £^ hj by 

£? K (\h? +lik _ 1 )(h? +1 , k _ 1 \®p) 

= ^ E i^f+i, fc Xfcf + i, fe i®i^(^)pi^(^) , 

(4) 

where ft,^ = (h^_ v a^, Xfe)- These super-operators cap- 
ture the effects of Alice and Bob playing game fc, where 
games j+1 to fc— 1 of the transcript are stored in a separate 
register. For i > k, let = £? h ? £? h ? 

and<f^=<^®<j< 

Let Pl = \4M, Pi(hj-i) = P 1 A J B - 1 (h j - 1 )p 1 P 1 A f_ 1 (h j . 1 )i 
/Tr(Pj^_ 1 (/ij_i)pi) be the state at the beginning of 
game j conditioned on hj-i, and pj = Sif-i(pi) = 
FtE/,,., \hj-i)(hj-i\ ® P^hj^P^hj.^. 
Compare to Eq. (1) in the main text. 

For fixed Hilbert spaces, a strategy S can be identified 
with the tuple (pi, {fj 4 }, {£f})- When considering multi- 
ple strategies, we will decorate this notation to indicate 
the corresponding strategy, e.g., S = (pi, {£/}, {£/})• 

Call a strategy for a single CHSH game e-structured 
if the probability of winning is at least cj* — e/8. In our 
theorem, we will assume that most games the devices play 
are e-structured, in the following sense: 



Definition B.l (Structured strategy). A sequential CHSH 
game strategy S is (5, e)-structured if for every j, there 
is at least a 1 — 5 probability over transcripts hj-i that 
game (j,hj-i) is e-structured. S is e-structured if it is 
(e, e) -structured. 

We aim to show that the devices play nearly ideally: 

Definition B.2 (Ideal strategy). A strategy S for n se- 
quential CHSH games is an ideal strategy if there ex- 
ist isometries X D : Hd ^ (C 2 ) 0n ® H' D and a state 
G H' A ® H' B He such that for every j and hj-i, 

i A ®i B W = \<pf n ®W) 

R D {hf_ 1 )=l D \R D a ) ] l D , 

where (R^)j denotes the ideal reflection operator R® from 
Figure 2 in the main text acting on the jth qubit. 

In order to compare strategies, define a notion of simu- 
lation: 

Definition B.3 (Strategy simulation). Let S and S be 

two strategies for playing n sequential CHSH games. For 
e > 0; we say that strategy S e-simulates strategy S if they 
both use the same Hilbert spaces and for all j, 

max . ||^-(pi)-^-(pi)||tr<e • (6) 

De{A,B} ,J ,J 

Say that S weakly e-simulates S if only the weaker inequal- 
ity \\£ A f( Pl ) - £ A f (pi)||tr < 2e holds. 

It is also convenient to allow a basis change by local 
unitaries or local isometries: 

Definition B.4. A strategy S is an isometric extension 
of S if there exist isometries X D : Hd ^ Hd such that 
\$) = X A ® X B \^) and X D R^{hf_ 1 ) = R^Qif^X 
always. (Thus X D Zf = Zf X D .) 

B.2 Main rigidity theorem and proof outline 

Our main theorem states that a structured strategy can 
be closely simulated by an ideal strategy: 

Theorem B.5 (Rigidity theorem for sequential CHSH 
games). There exists a constant n such that for any e- 
structured strategy S for n sequential CHSH games, there 
exists an ideal strategy S that nn K e 1 1 K -simulates an iso- 
metric extension of S. 

The first step of the proof of Theorem B.5 is to replace 
the structured strategy S with one in which the devices 
play every game using the ideal CHSH game operators on 
some qubit, up to a local change in basis. See Figure 4. 
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(a) General strategy (b) Single-qubit ideal strategy (c) Multi-qubit ideal strategy (d) Ideal strategy 



Figure 4: Proof outline for Theorem B.5. a, Initially, each device D G {A, B} can play arbitrarily, measuring in game j 
one of two reflections RaiJ^f-i)^ a £ {0? 1}? that depend on the local transcript h D _ 1 for the previous games. No 
structure is given for the Hilbert space T~Ld- b, We first show that D's strategy is close to a "single-qubit ideal strategy," 
in which for every game it measures some qubit using the ideal CHSH game strategy, but the qubit locations can be 
arbitrary. Here, the qubit s are illustrated schematically as balls, and the overlaps indicate that they need not be in 
tensor product, c, We then construct a nearby "multi-qubit ideal strategy," in which the qubits used in each game 
must lie in tensor product with the qubits from previous games, but can overlap qubits used along other transcripts, d, 
Finally, we argue that the qubit locations cannot depend significantly on the transcript, and therefore that the original 
strategy is well-approximated by an ideal strategy that measures a fixed set of n qubits in sequence. (Note that these 
visualizations, representing qubits as balls, are inherently imprecise. A qubit 's location in a Hilbert space is given not 
by a ball, but by the two anti-commuting reflection operators a x and a z .) 



Definition B.6 (Single-qubit ideal strategy). A strat- 
egy S is a single-qubit ideal strategy if there exist unitaries 
U ?^ h f-i) ^ C 2 ^n f D such that always 

Ra(hf-i) = U?{hf_J(R2 l)UP{hf^) . (7) 

That is, each device's reflections for game (j, Z^^) are 
equivalent up to local unitaries to the ideal CHSH game 
reflections, although the qubits used need not be in tensor 
product. 

Theorem B.7. There exists a constant n such that if S 
is an e- structured strategy for n sequential CHSH games, 
then there is a single-qubit ideal strategy S that nn K e x l K - 
simulates an isometric extension of S. 

Proof sketch. As explained in the main text, let Ef 
be the super-operator that replaces the device's mea- 
surement operators with the ideal operators promised 
by the CHSH rigidity theorem. Then S = 
(pi, If Pr[game j is e-structured] > 1 — 5, 

then \\£f B (pj) - £f B (Pj)\\tr < 25 + 0(y/e). (This expres- 
sion combines bounds on the probability of the bad event 
and the 0(y/e) error from the good event.) 

To show our goal, that £f B (pi) ~ ^n(pi) m trace 
distance, use a hybrid argument that works backwards 
from game n to game 1 fixing each game's measurement 
operators one at a time. The error introduced from fixing 
a game j, by moving from £^ B (pj) to £f B {pj), does not 
increase in later games because applying a super-operator 
cannot increase the trace distance. Mathematically, this 
hybrid argument is simply a triangle inequality using the 



expansion 

je[n] 

Therefore S weakly simulates <S; the extension to simu- 
lation is more technical, as described in the main text. □ 

Next, we find a nearby strategy in which the qubits for 
successive games are in tensor product. 

Definition B.8 (Multi-qubit ideal strategy). A strategy S 
is a multi-qubit ideal strategy if there is a unitary isomor- 
phism y D : Hd — > (C 2 ) 077, (8>1-L' D under which for unitaries 
MPihf^) e £((C 2 ) 8 ^ +1 )®^) such that 

R D (hf_ 1 )= y D ^M B K.. 

...M B y D . 

(8) 

That is, S is a single-qubit ideal strategy in which the qubits 
used in each game must lie in tensor product with the qubits 
from previous games. 

Theorem B.9. There exists a constant n such that if S is 
an e-structured single-qubit ideal strategy for n sequential 
CHSH games, then there is a multi-qubit ideal strategy S 
that K,n K e 1/ ' K -simulates an isometric extension of S. 

Proof sketch. The tensor-product structure is constructed 
beginning with a trivial transformation on S: to each 
device, add n ancilla qubits each in state |0). Next, after a 
qubit has been measured, say as \ctj) in game j, swap it 
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with the jth ancilla qubit, then rotate this fresh qubit from 
|0) to \aj) and continue playing games j + 1, . . . , n. This 
defines a unitary change of basis that places the outcomes 
for games 1 to j in the first j ancilla qubits, and leaves 
the state in the original Hilbert space unchanged. Since 
qubits are set aside after being measured, the qubits for 
later games are automatically in tensor product with those 
for earlier games; the resulting strategy S is multi-qubit 
ideal. At the end of the n games, swap back the ancilla 
qubits and undo their rotations, using the transcript. 

The key to showing that S is close to S is the fact that 
operations on one half of an EPR state can equivalently be 
performed on the other half, since for any 2x2 matrix M . 
(M <g> I) (| 00) + |11)) = (J <8> M T )(|00) + |11)). This means 
that the outcome of an e-structured CHSH game would be 
nearly unchanged if Bob were hypothetically to perform 
Alice's measurement before his own. By moving Alice's 
measurement operators for games j + 1 to n over to Bob's 
side, we see that they cannot significantly affect the qubit 
\a.j) from game j on her side. Therefore, undoing the 
original change of basis restores the ancilla qubits nearly 
to their initial state |0 n ), and S « S. 

Formally, define a unitary super-operator Vj that rotates 
the jth ancilla qubit to \aj), depending on Alice's local 
transcript hf. Define a unitary super-operator Tj to apply 
Vj and swap the jth ancilla qubit with the qubit Alice uses 
in game j (depending on h^_^), Alice's multi-qubit ideal 
strategy is given by 

Bf = T 1 -j_ 1 {l c ^®£f)T hj - 1 . (9) 

We aim to show that the strategy given by pi, {£f} and 
{£ B } is close to S up to the fixed isometry that prepends 
|0 n )(0 n | to the state, i.e., that |0 n )(0 n | <8> £f B (pi) ~ 

£i A n(|0 n )(0 n | ®£i,n(Pi))- Define a super-operator Tf B , 
in which Alice's measurements are made on Bob J s Hilbert 
space Hb, on the qubit determined by Bob's local transcript 
hf-i- Since most games are e-structured, by the CHSH 
rigidity theorem, Ff+ lik {pj+i) ~ £f+i, k {pj+i) = p k +i for 
any j < k. Since Tf+\ k acts on He, it does not affect 
Alice's qubit \aj) from game j at all, and so this qubit must 
stay near \aj) in p k +i as well, i.e., the trace of the reduced 
density matrix against the projection \aj)(aj\ stays close 
to one. As this holds for every j, T^n indeed returns the 
ancillas almost to their initial state |0 n ). 

In more detail, let Xj be the operator that projects onto 
Alice's jth ancilla qubit and the qubit she uses in the jth 
game being |0) |<x/). By definition, Tr(Xj Pj+i) — 1. By 
the Gentle Measurement Lemma, 40 ' 41 it suffices to show 
that Tr(Xjp k+1 ) = Tr X 3 £f B lk (p 3+1 ) « 1. This is not 
obvious; since the operators for games j + 1 to k do not 
act in tensor product, they can disturb the qubit measured 
in game j. However, since a super-operator on Hb cannot 
affect the expectation of an operator supported on Ha, we 



find 

Tr(X 3 p k+1 ) = TrX 3 £f^ k (p 3+1 ) 
w XjFf^ ^pj+x) 
= Tr(X j p j+1 ) 
= 1 . 

A symmetrical argument adjusts Bob's super-operators 
{£j B } to implying that S weakly simulates S. □ 

The last major step in the proof of Theorem B.5 is to 
argue that the qubit locations cannot depend significantly 
on the local transcripts, and therefore simulate a multi- 
qubit ideal strategy with an ideal strategy. 

Theorem B.10. There exists a constant k such that if S is 
an e-structured multi-qubit ideal strategy for n sequen- 
tial CHSH games, then there is an ideal strategy that 
rfe 1 ^ -simulates S. 

Proof sketch. Fix a transcript h n , chosen at random from 
the distribution of transcripts for S. Define a strategy 
S to use the same initial state p\ as S and the qubits 
specified by h n in <S, i.e., Raftf-i) = Raihf-i) m d e_ 
pendent of h B _ x . Thus, as required in Definition B.2, 

i D = (i (C2)9( „-i, ® m„ d (^_ 1 )) . . . M°y D . 

We argue that S closely approximates <S, provided 
that h n satisfies: for every j, conditioned on the partial 
transcript hj-i, (a) game j is e-structured, and (b) there 
is a high probability that every subsequent game is e- 
structured. By Markov inequalities, most transcripts sat- 
isfy these conditions. 

We connect S to S by an argument that one game at a 
time switches play to locate qubits according to h n . The 
intermediate steps relate strategies in which the devices 
locate their qubits using a hybrid (/ij, hj+i^ n ) of h n and 
the actual transcript h n . 

Consider a partial transcript hj that differs from hj only 
in the jth game, say on Alice's side. By (a) and the CHSH 
rigidity theorem, Alice's jth qubit is collapsed and nearly 
in tensor product with the rest of the state. Therefore, 
there exists a unitary V 3 A acting on this qubit such that 

Pj+x^KVfpj+SjWP , (10) 

up to error 0(yfe). Since applying a super-operator can- 
not increase trace distance and on Bob's side h B = hf, 
therefore 

Here, is the same super-operator used in the multi- 

qubit ideal strategy simulation step — that plays Alice's 
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games on Bob's qubits — except conditioned on the local 
transcript hf. By condition (b), these super-operators can 
be pulled back to Alice's side, to give 

£f^{p j+1 { hj )) KVfSffltip^htivp . 

Note that this approximation does not follow immediately 
from Eq. (10), because Alice's super-operators conditioned 
on can be very different from her super-operators con- 
ditioned on h^. 

By fixing the coordinates one at a time in this way, 
we find that for a typical transcript h n , p n +i(h n ) « 
v ^n Pn+i(h n )V^ f , and we conclude that £££{pi) « 

Since E^n measures qubits in tensor product with each 
other, by using the CHSH rigidity theorem one last time, it 
is not difficult to show that £in(pi) ~ &in (AO? where pi 
has n EPR pairs in the qubit positions determined by h n . 
Thus S is weakly simulated by the ideal strategy given by 

(pi,{£? },{£?})■ ' □ 

These three steps chain together to yield Theorem B.5, 
via: 

Lemma B.ll. Let S be a (5, e) -structured strategy for n 
sequential CHSH games. If S is a strategy that weakly 
rj- simulates S, then S is (S + e + 16 y/rj)- structured. 

This lemma follows immediately from the definitions. 

C Verified quantum dynamics proof sketches 
C.l XZ-determined states 

In the CHSH game, each device has two measurement set- 
tings, that in the ideal strategy may be identified with 
Pauli o~ x and a z operators. For carrying out tomography, 
however, it is generally necessary to be able to measure 
in the o~ y basis as well. It is possible to extend the CHSH 
game to one in which the ideal strategy also uses a y op- 
erators on a shared EPR state. However, this extended 
game will not satisfy the rigidity property. The problem 
is that a device that consistently measures using — o~ y will 
give indistinguishable statistics from one that uses +cr y . 
(Switching the sign of a y is equivalent to taking an entry- 
wise complex conjugate in the computational basis.) It is 
impossible to fix the sign of the a y operator. 

We therefore instead argue that for certain states, re- 
liable tomography can be accomplished without needing 
to measure in the o~ y basis. This observation is due to 
McKague 36 and was suggested earlier by Magniez et al. 42 
McKague shows that for \ip) = ^(|00) + |11)), an EPR 
pair, the states (I ®U)\cp), for any single-qubit real uni- 
tary J7, and CNOT24|(/?) 12 8> |<^) 34 , as well as finite tensor 
products of these states, are exactly determined by their 
traces against tensor products of /, a x and a z operators. 



That is, they are determined by the expectations of ob- 
servables that can be estimated using measurements in the 
a x and a z bases. We call such states "XZ-determined." 
For our applications, we will need to show a larger class of 
states to be XZ-determined. However, characterizing the 
full set of XZ-determined states remains an open problem. 

Definition C.l. For a Hilbert space T~L, a set of operators 
S C £(H) and d > 0, a state r G C(H) is determined by S 
with exponent d if there exists c > such that for all e > 
and any state p G C(H), 

max|TrP(p-r)| <e \\p - r|| tr < ce d . (11) 

For U = (C 2 ) 0n ; a state r is XZ-determined if it is 
determined with some exponent d > by the Pauli opera- 
tors {/, a x , a z }® n . 

Robustness is important for applications, but previous 
work has considered only e = 0. By Lojasiewicz's inequal- 
ity [43, Prop. 2.3.11] in algebraic geometry, robustness 
follows from the e = case: 

Lemma C.2. For a finite- dimensional Hilbert space T~L, 
a state r G C(H) is determined by a finite set S C C(H) 
if and only if for any state p G C(H), the implication of 
Eq. (11) holds ate = 0. 

Recall that a stabilizer state is an n-qubit pure state 
for which there exists a set of 2 n distinct and pairwise 
commuting operators S C {±P : P G {/, <j x , o~ yi <7 2 }® n }, 
the stabilizer group ^ such that P\ip) = |^) f° r a ll P ^ S. 44 
Any set of n operators that generate the stabilizer group S 
are called stabilizer generators for We prove: 

Theorem C.3. // |^) G (C 2 ) 0n is a stabilizer state that 
has a set of stabilizer generators in {I,o~ x ,o~ z }® n , and if 
U is the tensor product of any n single-qubit real unitaries, 
then U\ip) is XZ -determined. 

In particular, the resource states needed in our verified 
quantum dynamics protocol, 1 0) (g) (/ (8) H) \ cp) (g) (/ (8) G) \ ip) (8) 
CNOT2,4(|(^) (8) |(^)), are XZ-determined, as are the same 
states with G applied trans vers ally. This latter considera- 
tion is important because Alice's ideal measurement bases 
in the CHSH game are rotated by 7r/4 from o~ x and a z . 

The proof of Theorem C.3 begins by showing easily 
that |0) is determined by {cr z }. Then apply three closure 
properties. First, closure under tensor product for pure 
states implies that |0)® n is determined by the n operators 
cr z ®I®(- n ~ l \ . . . , /^O- 1 ) 8)ov Second, observe by manipu- 
lating implication (11) that if r is a state determined by S, 
then for any unitary U UrU^ is determined with the same 
exponent by {UPW : P G S}. Since an arbitrary stabilizer 
state can be generated by applying Clifford operators to 
|0)® n , this implies that a stabilizer state is determined by 
any of its sets of stabilizer generators. Furthermore, if r 
is determined by S = {Pi, . . . , P s }, then for any invertible 
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s x s matrix V, r is determined with the same exponent 
by *Ej=i VijPj : i = 1, . . . ,s}. This implies, e.g., that any 
XZ-determined state is also determined by the operators 
{/, -jT^Pz ±^)}® n , since the {I, a XJ cr z }® n coefficients are 
functions of the {I, ■^(o'z ± ^x)}® 71 coefficients. 

C.2 State tomography 

The state tomography protocol begins with (K — l)m 
CHSH games, where K is chosen randomly. The multi- 
game CHSH rigidity theorem implies that at the beginning 
of the Kth block of m, with high probability Alice and 
Bob share a state that is close to m shared EPR states, 
possibly in tensor product with an additional state, and 
that their separate measurement strategies for the next m 
games are close to the ideal strategy that uses one EPR 
state at a time. For the analysis of the state tomography 
protocol, we may therefore assume that Alice's strategy is 
exactly ideal and restrict consideration to these m EPR 
states. 

Bob, on the other hand, does not play more CHSH 
games, but instead is given by Eve a random permu- 
tation of the m indices, and is asked to permute his 
qubits and prepare many copies of a particular resource 
state. (In the main text, this state is specified as = 
|0>(8)(/(8) J H r )|y?>(8)(/(8)G)|^)(8)CNOT2,4(|^>(8)|^». The |0) 
portion is for preparing the initial states in a computation 
and implementing the final measurements, and the other 
subsystems are for teleporting into each of the gates in a 
universal gate set, e.g., (J G)\cp) for teleporting into G. 
However, after teleporting into G, an H correction may or 
may not be required. To maintain the blindness property 
of the protocol, i.e., to avoid leaking any information about 
the computation to the separate devices, it is of technical 
use to have available the resource state <S> |<p), where the 
extra EPR state is used for teleporting into the identity 
gate when an H correction is not needed.) 

Note that Bob's reduced density matrix is maximally 
mixed, so the probability that he can measure the correct 
11-qubit resource state is only 1/2 11 . However, since the 
states {(P ® I)\(p) : P G {/, cr x , (J yi cr z }} form an orthonor- 
mal basis, so too do the states 

P (0) |0) <g> (P (1) <g> 1)\<p) <g> (P (2) <g> H)\<p) <g> (P (3) <g> G)\<p) 
(P x (4) P 3 (5) CNOT 2 , 4 )(|^) 12 |y>) 34 ) , (12) 

where P(°) G {I,a x } and the other P^ vary over 
{/, cr x , <j y , o~ z }. Any of the states in Eq. (12) are equally 
useful resources for computation by teleportation, as Eve 
can adjust for the P^ operators in her classical Pauli 
frame. 45 

Therefore define an ideal state tomography protocol as 
one in which Alice and Bob's initial state consists of m 
shared EPR states, possibly in tensor product with an addi- 
tional state; Alice plays honestly m CHSH games, directed 



by Eve; and Eve sends Bob a random m-item permutation 
and requests that he return the results of measuring con- 
secutive 11-qubit blocks of permuted qubits in the basis of 
Eq. (12). Eve rejects if the tomography statistics returned 
by Alice are inconsistent with Bob's reported outcomes. 
More precisely, she rejects if the fraction of times Bob 
reports any particular state differs from 1/2 11 by more 
than y/ (log m)/m, i.e., about ylogra standard deviations, 
or if for any state any of its {/, X, Z}® 11 Pauli coefficients 
differ from the corresponding observed estimates by more 
than yj (log m)/m. We show: 

Theorem C.4. In an ideal state tomography protocol, if 
Alice plays honestly, then: 

Completeness: If Bob plays honestly, then Eve accepts 
with high probability. 

Soundness: If Eve accepts with high probability, then 
there is a high probability that, after Bob and before 
Alice 1 s play, for most of the consecutive 11-qubit sub- 
systems, Alice's reduced state on the subsystem is close 
to the state in Eq. (12) that Bob reported to Eve. 

In these statements, "with high probability" means with 
probability inverse polynomially close to one, i.e., at least 
1 — l/m c , where the exact exponents are adjustable. 

The completeness property of the protocol is a trivial 
application of Hoeffding's inequality; the probability of 
straying by more than ylogra standard deviations is at 
most exp(— fJ(logra)) = ra - ^ 1 ). The soundness property 
is also mostly a straightforward tomography argument, us- 
ing that the states in Eq. (12) are all XZ-deter mined. The 
main technical complication is that the states of Alice's 
11-qubit blocks need not be in tensor product. There- 
fore, her measurement results on different blocks need not 
be independent. They can be controlled with a suitable 
martingale. 

First fix a permutation a G S m and a string x G 
({0, i} 11 ) 771 / 11 such that, conditioned on Eve sending Bob 
g and receiving back x, Eve accepts with high probability. 
The remaining randomness consists of Alice's measurement 
bases and results. Since Alice's measurements commute, we 
may assume that she measures her qubits in the permuted 
order, without changing the measurement statistics. 

For j = l,...,m/ll, let pj be Alice's initial reduced 
state on her jth block of 11 qubits. Our goal is to control 
most of the states pj . Let o~j be the state of the same qubits 
just before she begins to measure them. The state o~j is 
a random variable, but is a deterministic function of the 
transcript h^._^ of the earlier CHSH games with Alice. 
Conditioned on Alice's measurement results for 

games 11 (j — 1) + 1, . . . , 11 j are distributed according to 
the Pauli coordinates of aj. 

For each b G {0, l} 11 , let tt^ be the corresponding state 
of Eq. (12), and let 75 be the average of those o~j for which 
Bob reported Xj = b. Using a martingale argument, we 
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can establish that with high probability, for all 6, tt^ and 75 
have similar {J,^,^}® 11 Pauli coordinates. Since 71-5 is 
XZ- deter mined, this implies that all Pauli coordinates of tt^ 
and T5 are close. Since tt^ is a pure state, i.e., an extremal 
quantum state, a Markov inequality implies that for most j 
with xj =6, 7T5 and o~j have close Pauli coordinates. Finally, 
average back over the transcripts to get that for most j with 
xj = 6, ir b is close to Pj = E^ 1( ._ 1) Pr ^n( j -i)] cr j(^n (j -i))- 
This is the claim. 

Theorem C.4 says that Bob's measurement usually pre- 
pares the correct state on Alice's side — but it says nothing 
about the distribution of his measurement results. Since 
Bob's half of the shared EPR states is maximally mixed, 
his measurement outcomes are in fact distributed nearly 
uniformly on most subsystems. Thus the effect of Bob's 
actual super-operator is close to that of the ideal super- 
operator, if we trace out everything except for a random 
subset of subsystems on Alice's side. 

C.3 Process tomography 

Computation by teleportation uses adaptively chosen two- 
qubit Bell measurements on prepared resource states. The 
state tomography protocol gives Eve a way of ensuring that 
Alice's initial m-qubit state consists of the desired resource 
states. The Bell states {(P <g> I)\ip) ' P G {I, cr x , cr y , c^}}, 
eigenstates of the Bell measurement, are themselves XZ- 
determined states. A symmetrical protocol, with the roles 
of Alice and Bob switched, could thus be used to prepare 
these states in Bob's initial m-qubit state, before his play 
begins. However, for verified quantum computation we 
need a stronger conclusion, that after Bob's measurements 
collapse Alice's initial state into copies of the resource 
states of Eq. (12), Alice's operations indeed implement Bell 
measurements. This is a stronger conclusion because, as 
explained earlier, it is possible that dishonest operations 
on Alice's side — far from Bell measurements — could still 
collapse Bob's initial state to many copies of Bell states. 

The process tomography protocol, to ensure Alice's hon- 
esty, begins in the same way as state tomography, with 
(K — l)m CHSH games refereed between both players. The 
multi-game rigidity theorem again allows us to assume that 
the devices then share m EPR states and would play the 
if th block of games honestly, according to the ideal CHSH 
game strategy. However, Eve only continues playing CHSH 
games with Bob. To Alice, Eve repeatedly sends random 
pairs of indices, drawn uniformly without replacement from 
{1, . . . , m}, requesting the results of Bell measurements on 
the specified qubits. Eve does not try to draw any sta- 
tistical conclusions from the reported results, but instead 
rejects if Alice's reported result for any pair of qubits is 
inconsistent with Bob's reported outcomes. For example, if 
Alice reports measuring the Bell state \ip) and Bob is asked 
to measure the same two qubits both in the <j z basis, then 
the parity of Bob's measurement results should be 0. This 



is because cr z ^a z is a stabilizer for \cp): (o~ z ®o~ z )\(p) = \cp). 
The four Bell states are all stabilized by ±a z (g) a z and 
±a x <S> cr x , with four different sign choices. If Bob is asked 
to measure one of the two qubits in the <j x basis and one 
in the <j z basis, then his results for that pair do not give a 
check on Alice. 

From Alice's perspective, the interaction is indistinguish- 
able from the questions she would be asked in an actual 
computation; she is entirely unaware that Bob is playing 
CHSH games instead of preparing resource states. 

We show: 

Theorem C.5. In the process tomography protocol, if after 
the first (K — l)m CHSH games, Bob plays honestly on 
his halves of m shared EPR states, then: 

Completeness: If Alice plays honestly, Eve accepts with 
probability one. 

Soundness: If Eve accepts with high probability, then the 
result of Alice's super- operator applied to the initial 
state is close to that of applying the ideal Bell mea- 
surements super- operator to the initial state. 

Again, the completeness statement is trivial. The sound- 
ness statement is not difficult. Fix a permutation of the 
qubits for which Eve accepts with high probability. We 
prove soundness for the protocol in which Alice is given 
the full permutation at the beginning instead of only two 
indices at a time; this can only give her more opportunities 
to cheat. 

Let p\ be the initial state, consisting of m EPR states. 
Without loss of generality, Alice's strategy consists of mea- 
suring a complete set of 2 m orthogonal projections, and 
returning the outcome. For j = l,...,m/2, let Gf be 
Alice's super-operator that implements the jth alleged Bell 
measurement, by the appropriate marginal projective mea- 
surement. For j < k, let Qf k = Gf • • • Gf +1 Gf- Alice's full 
strategy is implemented by Gf m / 2 - Let Gf be the ideal 
super-operator that actually carries out a Bell measurement 
on the jth specified pair of qubits, and Gf^ = Gf * * * Gf- 
Our goal is to show that in trace distance 

C/2(ft) K ^/2(/5i). (13) 

Since Eve accepts all the tests with high probability, it 
must be that for every j, Eve's jth Bell measurement test 
passes with high probability. By the Gentle Measurement 
Lemma, this implies that Gf(pi) ~ Gf(pi)- For j = 1, 
this gives the first step: 

^l 4 m/2(Pl) ~ G£m/2&l(M ■ 

We cannot immediately apply Gf(pi) ~ G^ipi) t° continue, 
because although the Gf super-operators commute with 
each other, G2 might not commute with Gf- 
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An easy trick gets around the problem. Define Tf 
to implement a Bell measurement on the jth specified 
pair of qubits on Bob's side. Let Tf k = • • • Tf . Then 

Gf(pi) = Pf(p\). Super-operators acting on Bob's Hilbert 
space automatically commute with those acting on Alice's 
space, so we can continue the above derivation: 

Gtm/2(fa) ~ &£m/2&l(Pl) = ?! G^^h) 

~ ?! G^m^HM = J r i i2 G^ rn / 2 (pl) ~ ' ' * 
~ A B m/2(Pl) = Gi y7n/2 (pl) ■ 

The total approximation error is linear in m. 
C.4 QMIP = MIP* 

The way in which protocols for CHSH games, state and 
process tomography, and computation are combined to 
give verified quantum dynamics is sketched in the main 
text. We also describe there the main remaining technical 
obstacle, the issue of Eve choosing her questions adaptively. 
Formally, let p be the initial state, and let B be the super- 
operator describing Eve's interactions with Bob in state 
tomography. Roughly, state tomography implies that the 
states Bob prepares on Alice's side are correct up to a small 
error in trace distance, or 

Trs B(p) « Trs B(p) , (14) 

where B is the ideal super-operator and p is an ideal initial 
state consisting of perfect EPR states. Similarly, let A be 
the super-operator describing Eve's interactions with Alice 
in a process tomography protocol on Alice's operations; we 
have 

A(p) « A(p) ■ (15) 

Computation by teleportation can be implemented ei- 
ther by choosing Bob's state preparation questions non- 
adaptively and Alice's process questions adaptively, or vice 
versa. We show that these are exactly equivalent regardless 
of the devices' strategies, i.e., 

A ad B = B ad A , (16) 

where A ad and B ad are the same as A and S, respectively, 
except with Eve choosing her questions adaptively based on 
the previous messages. Combining these steps, we therefore 
obtain 

Tt b B ad A(p) « Tr B B ad A(p) 
= A a d Tr# B(p) 
~ A ad Tv B B ad (p) , 

and thus the actual computation by teleportation protocol 
leaves on Alice's side nearly the ideal output. 

In this supplement, we would like to highlight two points 
of the proof that QMIP = MIP*: the conversion into a 



three-round protocol, and the addition of two new provers 
instead of reusing provers. 

QMIP is the class of languages decidable by a polynomial- 
time quantum verifier exchanging polynomially many quan- 
tum messages with a polynomial number of quantum 
provers, who have unbounded computational power and 
share entanglement but cannot communicate among them- 
selves. Kempe et al. have shown that any QMIP protocol 
can be converted into a three-turn protocol in which the 
provers send a quantum message to the verifier, the verifier 
broadcasts the result of a random coin flip, the provers each 
send a second quantum message, and then the verifier ap- 
plies an efficient measurement to decide whether to accept 
or reject. 38 Beginning with this protocol transformation, 
our proof adds two new provers, Alice and Bob. The clas- 
sical verifier, Eve, teleports both rounds of messages from 
the original k provers to Alice, and then directs Alice and 
Bob to run the original verifier's quantum circuit. 

A natural question is whether it is necessary to add 
two new provers or if two of the provers already present 
can be used for implementing verified quantum dynamics. 
We conjecture that adding new provers is not necessary. 
Broadbent et al., for example, have suggested that a Ap- 
prover QMIP protocol can be converted to a /c-prover 
MIP* protocol deciding the same language, and the scheme 
that they present indeed reuses the first two provers to 
simulate the verifier's quantum computations. 32 However, 
the analysis of this scheme does not consider all ways in 
which provers can play dishonestly. 

In fact, any scheme with a structure along the lines pre- 
sented either by us or by Broadbent et al. will be unsound — 
if it does not first convert to a three-turn protocol or use 
more sophisticated tricks. Here is a general counterexam- 
ple. Begin with an arbitrary QMIP protocol V, deciding a 
language L. Modify the protocol by adding one new round 
at the end. In this last round, the provers can each send 
classical messages to the verifier, which the verifier simply 
broadcasts back to all of the provers. The effect of this 
final interaction is to allow the provers to communicate 
with each other. (Since they share entanglement, they 
can use quantum teleportation to communicate quantum 
information, if desired.) The modified protocol V' decides 
the same language L, with the exact same completeness 
and soundness parameters, though; communicating in the 
last step does not help the provers cheat. 

Convert the modified protocol, somehow, into an MIP* 
protocol V" that uses the first two provers to simulate 
the verifier's quantum computations. In particular, they 
simulate the final acceptance predicate, by some procedure 
that has traps to detect cheating — in our scheme, CHSH 
games or state or process tomography. The problem is that 
the last round of messages in V' is useless, but in V" the 
intercommunication allows the provers to reveal to each 
other the traps set by the verifier. This allows them to 
avoid the traps and cheat freely. V" is unsound. 
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Converting to a three-turn protocol at the start deflects 
this general attack, as does using two fresh provers to 
run the verifier's quantum computation. Speculatively, 
another way to avoid the attack might be to refresh the 
verifier's secrets — resetting any traps and re-hiding any 
quantum information — before revealing any message to a 
prover. Any messages can carry information that affect the 
security of the converted MIP* protocol differently from 
the original QMIP protocol. 
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